Security Advisory

CVE-2021-44226

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2022-03-23 00:00:00
Last updated 2024-08-04 04:17:24
Assigner mitre
State PUBLISHED

Description

Razer Synapse before 3.7.0228.022817 allows privilege escalation because it relies on %PROGRAMDATA%RazerSynapse3Servicebin even if %PROGRAMDATA%Razer has been created by any unprivileged user before Synapse is installed. The unprivileged user may have placed Trojan horse DLLs there.